METHOD OF COMBINED CRYPTOGRAPHIC DATA PROTECTION IN CORPORATE CLOUD COMPUTING

Abstract

This paper presents a method of combined cryptographic data protection for corporate cloud computing aimed at improving the confidentiality, integrity, authenticity, and availability of information resources under dynamically changing operating conditions. A comprehensive analysis of contemporary cryptographic protection methods for corporate cloud environments was conducted, identifying their advantages, limitations, and practical application characteristics. The analysis demonstrated that the independent application of encryption, cryptographic key management, and access control mechanisms does not provide an appropriate balance between security, system performance, and adaptability. The specific characteristics of corporate cloud environments, including multi-tenant architectures, distributed data storage, context-aware access control, and the Zero Trust concept, were examined to determine the requirements for modern cryptographic protection mechanisms. A combined cryptographic data protection method is proposed that integrates symmetric and asymmetric encryption, adaptive cryptographic key management, context-aware selection of encryption modes, and compromise risk assessment. The structure of the proposed method, the sequence of its operational stages, and the mechanism for selecting cryptographic parameters according to information resource characteristics, user trust level, and the current state of the cloud environment are described. A structural-functional and scenario-based evaluation of the proposed method was performed in comparison with static and conventional hybrid approaches. The evaluation results demonstrate that, unlike existing approaches, the proposed method provides context-aware cryptographic profile selection, proactive key rotation, cryptographic container validity verification, and adaptive response to changes in cyber risk. The practical significance of the proposed method lies in its applicability to the design and deployment of secure corporate cloud services.

Keywords: corporate cloud computing; cryptographic protection; combined cryptographic method; symmetric encryption; asymmetric encryption; cryptographic keys; context-aware security; risk assessment; confidentiality; data integrity.